CVE-2026-60004
Quick assessment
Affected
Gitea Gitea
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Gitea 在 1.27.1 之前的版本中，存在通过 diffpatch API 利用 Git 钩子（hook）安装机制实现远程代码执行（RCE）的漏洞。
Public Exploits 1
Nuclei · 1
CVE-2026-60004.yaml [template]
In-the-Wild Activity Observed
cisa_kev · confirmed
github_trending · low
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-60004
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-60004
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Gitea versions 1.17 through 1.27.0 contain a remote code execution vulnerability in the diffpatch endpoint caused by an add/add collision that writes an executable Git hook into the bare repository's GIT_DIR. An attacker with write access can execute arbitrary commands as the Gitea service account, exploit requires only open registration for unauthenticated access. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-60004.yaml | POC Details |
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 7542 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-60004
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-60004 (1)
Proof of Concept for CVE-2026-60004 (1)
Security Blog Posts for CVE-2026-60004 (2)
IV. Related Vulnerabilities
Same vendor: Gitea
-
CVE-2026-24059
Gitea runner registration-token GET endpoint performs a writ -
CVE-2026-24791
Public-only tokens bypass private-resource restrictions on ` -
CVE-2026-59765
SSRF via Migration Asset Downloads Bypasses hostmatcher — Re -
CVE-2026-59763
Unbounded Arch package file metadata can cause resource ampl -
CVE-2026-58511
Webhook Authorization Header Returned in Plaintext via API
Same weakness: CWE-94
-
CVE-2026-58474
whichllm < 0.5.16 Code Injection via run and snippet command -
CVE-2026-76148
CorvusSKK 代码注入漏洞可导致任意代码执行 -
CVE-2026-80201
Kimai before 2.53.0 API Token Leakage via Invoice Template -
CVE-2026-57170
Trestle SSTI in Jinja2 include tags allows arbitrary code ex -
CVE-2026-54757
Trestle has Server-Side Template Injection (SSTI) via Recurs
V. Comments for CVE-2026-60004
No comments yet